Warning: Permanently added '[localhost]:26653' (ED25519) to the list of known hosts. 2024/01/08 20:16:06 ignoring optional flag "sandboxArg"="0" 2024/01/08 20:16:06 parsed 1 programs [ 133.474351][ T38] kauditd_printk_skb: 34 callbacks suppressed [ 133.474359][ T38] audit: type=1400 audit(1704744966.821:200): avc: denied { getattr } for pid=5407 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 133.485635][ T38] audit: type=1400 audit(1704744966.831:201): avc: denied { read } for pid=5407 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 133.495019][ T38] audit: type=1400 audit(1704744966.831:202): avc: denied { open } for pid=5407 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 133.513662][ T38] audit: type=1400 audit(1704744966.861:203): avc: denied { mounton } for pid=5414 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 133.522709][ T38] audit: type=1400 audit(1704744966.861:204): avc: denied { mount } for pid=5414 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/01/08 20:16:06 executed programs: 0 [ 133.570771][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.574137][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.577394][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.581258][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.585032][ T61] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 133.588861][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.599165][ T38] audit: type=1400 audit(1704744966.951:205): avc: denied { mounton } for pid=5419 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 133.792523][ T5419] chnl_net:caif_netlink_parms(): no params data found [ 134.049008][ T5419] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.053402][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.074425][ T5419] bridge_slave_0: entered allmulticast mode [ 134.079147][ T5419] bridge_slave_0: entered promiscuous mode [ 134.085171][ T5419] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.088429][ T5419] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.091785][ T5419] bridge_slave_1: entered allmulticast mode [ 134.095266][ T5419] bridge_slave_1: entered promiscuous mode [ 134.165732][ T5419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.174664][ T5419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.256756][ T5419] team0: Port device team_slave_0 added [ 134.265551][ T5419] team0: Port device team_slave_1 added [ 134.370723][ T5419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.375133][ T5419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.393697][ T5419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.410390][ T5419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.413303][ T5419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.441291][ T5419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.606496][ T5419] hsr_slave_0: entered promiscuous mode [ 134.623221][ T5419] hsr_slave_1: entered promiscuous mode [ 135.638240][ T4612] Bluetooth: hci0: command 0x0409 tx timeout [ 135.729133][ T5419] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.735500][ T5419] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.747034][ T5419] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.752890][ T5419] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.832151][ T5419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.851427][ T5419] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.860599][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.863302][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.883678][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.886959][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.948793][ T38] audit: type=1400 audit(1704744969.301:206): avc: denied { sys_module } for pid=5419 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 136.012773][ T5419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.042921][ T5419] veth0_vlan: entered promiscuous mode [ 136.049093][ T5419] veth1_vlan: entered promiscuous mode [ 136.068394][ T5419] veth0_macvtap: entered promiscuous mode [ 136.073242][ T5419] veth1_macvtap: entered promiscuous mode [ 136.084611][ T5419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.093320][ T5419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.099035][ T5419] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.102186][ T5419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.105469][ T5419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.109516][ T5419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.254020][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.256932][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.323146][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.326161][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.342114][ T38] audit: type=1400 audit(1704744969.681:207): avc: denied { mounton } for pid=5419 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 136.470544][ T38] audit: type=1400 audit(1704744969.811:208): avc: denied { ioctl } for pid=5476 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=760 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.527033][ T38] audit: type=1400 audit(1704744969.811:209): avc: denied { ioctl } for pid=5476 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=760 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.755809][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 137.173977][ T45] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 137.178445][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.188593][ T45] usb 5-1: config 0 has no interface number 0 [ 137.191310][ T45] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 137.199840][ T45] usb 5-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=98.19 [ 137.204827][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.213987][ T45] usb 5-1: config 0 descriptor?? [ 137.272585][ T45] em28xx 5-1:0.237: New device @ 480 Mbps (2040:826d, interface 237, class 237) [ 137.277094][ T45] em28xx 5-1:0.237: Audio interface 237 found (Vendor Class) [ 137.588304][ T45] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 137.609138][ T45] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 137.628272][ T45] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 137.632066][ T45] em28xx 5-1:0.237: No AC97 audio processor [ 137.634807][ T45] em28xx 5-1:0.237: We currently don't support analog TV or stream capture on dual tuners. [ 137.720628][ T4612] Bluetooth: hci0: command 0x041b tx timeout [ 137.788237][ T45] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 137.808399][ T45] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 137.828302][ T45] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 137.831415][ T45] em28xx 5-1:0.237: No AC97 audio processor [ 138.078917][ T45] usb 5-1: USB disconnect, device number 2 [ 138.082029][ T45] em28xx 5-1:0.237: Disconnecting em28xx #1 [ 138.084385][ T45] em28xx 5-1:0.237: Disconnecting em28xx [ 138.093159][ T45] em28xx 5-1:0.237: Freeing device [ 138.095583][ T45] em28xx 5-1:0.237: Freeing device [ 138.478206][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.878283][ T45] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 138.881274][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.884784][ T45] usb 5-1: config 0 has no interface number 0 [ 138.886975][ T45] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 138.892062][ T45] usb 5-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=98.19 [ 138.895508][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.900050][ T45] usb 5-1: config 0 descriptor?? [ 138.940615][ T45] em28xx 5-1:0.237: New device @ 480 Mbps (2040:826d, interface 237, class 237) [ 138.944473][ T45] em28xx 5-1:0.237: Audio interface 237 found (Vendor Class) [ 139.268160][ T45] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 139.288146][ T45] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 139.308174][ T45] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 139.311163][ T45] em28xx 5-1:0.237: No AC97 audio processor [ 139.313496][ T45] list_add corruption. prev->next should be next (ffffffff8e5bdb60), but was 0000000000000000. (prev=ffff88801cf90250). [ 139.318291][ T45] ------------[ cut here ]------------ [ 139.320231][ T45] kernel BUG at lib/list_debug.c:32! [ 139.322651][ T45] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 139.326006][ T45] CPU: 3 PID: 45 Comm: kworker/3:1 Not tainted 6.7.0-syzkaller-g0dd3ee311255 #0 [ 139.329133][ T45] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 139.333255][ T45] Workqueue: usb_hub_wq hub_event [ 139.335023][ T45] RIP: 0010:__list_add_valid_or_report+0xba/0x100 [ 139.337290][ T45] Code: 01 fd 90 0f 0b 48 89 d9 48 c7 c7 60 da 2e 8b e8 6c 89 01 fd 90 0f 0b 48 89 f1 48 c7 c7 e0 da 2e 8b 48 89 de e8 57 89 01 fd 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 60 db 2e 8b e8 3f 89 01 [ 139.344059][ T45] RSP: 0018:ffffc90000bf6f28 EFLAGS: 00010282 [ 139.346238][ T45] RAX: 0000000000000075 RBX: ffffffff8e5bdb60 RCX: ffffffff816957e9 [ 139.349021][ T45] RDX: 0000000000000000 RSI: ffffffff8169dc92 RDI: 0000000000000005 [ 139.351828][ T45] RBP: ffff88801ccbc250 R08: 0000000000000005 R09: 0000000000000000 [ 139.354728][ T45] R10: 0000000080000000 R11: 0000000000000006 R12: ffff88801ccbc250 [ 139.357610][ T45] R13: ffff88801ccbc000 R14: ffff88801ccbd9d4 R15: ffff88802e536000 [ 139.360485][ T45] FS: 0000000000000000(0000) GS:ffff88806b900000(0000) knlGS:0000000000000000 [ 139.363673][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.365984][ T45] CR2: 00007f3d7cdf55e8 CR3: 000000001f547000 CR4: 0000000000350ef0 [ 139.368906][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 139.371649][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 139.374373][ T45] Call Trace: [ 139.375577][ T45] [ 139.376612][ T45] ? show_regs+0x8f/0xa0 [ 139.378102][ T45] ? die+0x36/0xa0 [ 139.379440][ T45] ? do_trap+0x22b/0x420 [ 139.380918][ T45] ? __list_add_valid_or_report+0xba/0x100 [ 139.382939][ T45] ? __list_add_valid_or_report+0xba/0x100 [ 139.384959][ T45] ? do_error_trap+0xf4/0x230 [ 139.386601][ T45] ? __list_add_valid_or_report+0xba/0x100 [ 139.388661][ T45] ? handle_invalid_op+0x34/0x40 [ 139.390416][ T45] ? __list_add_valid_or_report+0xba/0x100 [ 139.392467][ T45] ? exc_invalid_op+0x2e/0x40 [ 139.394124][ T45] ? asm_exc_invalid_op+0x1a/0x20 [ 139.395899][ T45] ? __wake_up_klogd.part.0+0x99/0xf0 [ 139.397789][ T45] ? vprintk+0x82/0x90 [ 139.399231][ T45] ? __list_add_valid_or_report+0xba/0x100 [ 139.401312][ T45] ? __list_add_valid_or_report+0xb9/0x100 [ 139.403444][ T45] em28xx_init_extension+0x48/0x1f0 [ 139.405269][ T45] em28xx_init_dev.constprop.0+0x1977/0x3080 [ 139.407372][ T45] ? em28xx_usb_disconnect+0x640/0x640 [ 139.409282][ T45] ? lockdep_init_map_type+0x16d/0x7d0 [ 139.411203][ T45] ? lockdep_init_map_type+0x16d/0x7d0 [ 139.413217][ T45] ? __raw_spin_lock_init+0x3a/0x110 [ 139.415241][ T45] em28xx_usb_probe+0x10d7/0x3730 [ 139.417059][ T45] usb_probe_interface+0x307/0x930 [ 139.418881][ T45] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 139.420799][ T45] really_probe+0x234/0xc90 [ 139.422397][ T45] __driver_probe_device+0x1de/0x4b0 [ 139.424316][ T45] driver_probe_device+0x4c/0x1a0 [ 139.426084][ T45] __device_attach_driver+0x1d4/0x300 [ 139.427966][ T45] ? driver_probe_device+0x1a0/0x1a0 [ 139.429823][ T45] bus_for_each_drv+0x157/0x1d0 [ 139.431567][ T45] ? bus_for_each_dev+0x1d0/0x1d0 [ 139.433340][ T45] ? lockdep_hardirqs_on+0x7d/0x110 [ 139.435173][ T45] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 139.437222][ T45] __device_attach+0x1e8/0x4b0 [ 139.438908][ T45] ? device_driver_attach+0x200/0x200 [ 139.440799][ T45] ? do_raw_spin_unlock+0x173/0x230 [ 139.442632][ T45] bus_probe_device+0x17c/0x1c0 [ 139.444372][ T45] device_add+0x117e/0x1aa0 [ 139.445975][ T45] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 139.448368][ T45] ? preempt_schedule_thunk+0x1a/0x30 [ 139.450247][ T45] usb_set_configuration+0x10cb/0x1c40 [ 139.452181][ T45] usb_generic_driver_probe+0xca/0x130 [ 139.454097][ T45] usb_probe_device+0xda/0x2c0 [ 139.455789][ T45] ? usb_driver_release_interface+0x190/0x190 [ 139.457924][ T45] really_probe+0x234/0xc90 [ 139.459491][ T45] __driver_probe_device+0x1de/0x4b0 [ 139.461336][ T45] ? usb_driver_applicable+0x1c4/0x220 [ 139.463595][ T45] driver_probe_device+0x4c/0x1a0 [ 139.465863][ T45] __device_attach_driver+0x1d4/0x300 [ 139.467775][ T45] ? driver_probe_device+0x1a0/0x1a0 [ 139.469721][ T45] bus_for_each_drv+0x157/0x1d0 [ 139.471476][ T45] ? bus_for_each_dev+0x1d0/0x1d0 [ 139.473289][ T45] ? lockdep_hardirqs_on+0x7d/0x110 [ 139.475223][ T45] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 139.477264][ T45] __device_attach+0x1e8/0x4b0 [ 139.478959][ T45] ? device_driver_attach+0x200/0x200 [ 139.480878][ T45] ? do_raw_spin_unlock+0x173/0x230 [ 139.482722][ T45] bus_probe_device+0x17c/0x1c0 [ 139.484480][ T45] device_add+0x117e/0x1aa0 [ 139.486084][ T45] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 139.488568][ T45] ? usb_detect_static_quirks+0x335/0x3e0 [ 139.490578][ T45] usb_new_device+0xd80/0x19f0 [ 139.492300][ T45] ? hub_disconnect+0x520/0x520 [ 139.494021][ T45] hub_event+0x2dac/0x4e10 [ 139.495627][ T45] ? hub_port_debounce+0x3d0/0x3d0 [ 139.497434][ T45] ? lock_pin_lock+0x141/0x2d0 [ 139.499261][ T45] ? lock_sync+0x190/0x190 [ 139.500895][ T45] ? reacquire_held_locks+0x4c0/0x4c0 [ 139.502825][ T45] process_one_work+0x886/0x15d0 [ 139.504633][ T45] ? hub_port_debounce+0x3d0/0x3d0 [ 139.506452][ T45] ? workqueue_congested+0x300/0x300 [ 139.508328][ T45] ? assign_work+0x1a0/0x250 [ 139.510046][ T45] worker_thread+0x8b9/0x1290 [ 139.511742][ T45] ? process_one_work+0x15d0/0x15d0 [ 139.513569][ T45] kthread+0x2c6/0x3a0 [ 139.515007][ T45] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.516916][ T45] ? kthread_complete_and_exit+0x40/0x40 [ 139.518922][ T45] ret_from_fork+0x45/0x80 [ 139.520499][ T45] ? kthread_complete_and_exit+0x40/0x40 [ 139.522463][ T45] ret_from_fork_asm+0x11/0x20 [ 139.524156][ T45] [ 139.525243][ T45] Modules linked in: [ 139.528321][ T45] ---[ end trace 0000000000000000 ]--- [ 139.530258][ T45] RIP: 0010:__list_add_valid_or_report+0xba/0x100 [ 139.532542][ T45] Code: 01 fd 90 0f 0b 48 89 d9 48 c7 c7 60 da 2e 8b e8 6c 89 01 fd 90 0f 0b 48 89 f1 48 c7 c7 e0 da 2e 8b 48 89 de e8 57 89 01 fd 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 60 db 2e 8b e8 3f 89 01 [ 139.540048][ T45] RSP: 0018:ffffc90000bf6f28 EFLAGS: 00010282 [ 139.542201][ T45] RAX: 0000000000000075 RBX: ffffffff8e5bdb60 RCX: ffffffff816957e9 [ 139.544981][ T45] RDX: 0000000000000000 RSI: ffffffff8169dc92 RDI: 0000000000000005 [ 139.547794][ T45] RBP: ffff88801ccbc250 R08: 0000000000000005 R09: 0000000000000000 [ 139.550675][ T45] R10: 0000000080000000 R11: 0000000000000006 R12: ffff88801ccbc250 [ 139.553598][ T45] R13: ffff88801ccbc000 R14: ffff88801ccbd9d4 R15: ffff88802e536000 [ 139.556660][ T45] FS: 0000000000000000(0000) GS:ffff88806b900000(0000) knlGS:0000000000000000 [ 139.559873][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.562213][ T45] CR2: 00007f3d7cdf55e8 CR3: 0000000023451000 CR4: 0000000000350ef0 [ 139.565044][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 139.567846][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 139.570670][ T45] Kernel panic - not syncing: Fatal exception [ 139.573695][ T45] Kernel Offset: disabled [ 139.575558][ T45] Rebooting in 86400 seconds..